![Kehinde Alabede, Developer in Cardiff, United Kingdom](https://assets.toptal.io/images?url=https%3A%2F%2Fbs-uploads.toptal.io%2Fblackfish-uploads%2Ftalent%2F1165594%2Fpicture%2Foptimized%2Fhuge_098289c99966f4c3e047dfeaefd6c2e4-5ff15f11c0b2a52becc6ddd61b12ac86.jpg&width=480)
Kehinde Alabede
Verified Expert in Engineering
Network Engineer and Developer
Cardiff, United Kingdom
Toptal member since December 13, 2023
Kehinde is a skilled network security engineer with experience building secure connectivity solutions using various IT technologies in hybrid and complex environments. Adept at scripting, automation, and designing and implementing firewalls and cybersecurity solutions, he delivers efficient data movement and automated network workflows. With analytical and problem-solving skills, Kehinde successfully solves network problems with minimal downtime to production.
Portfolio
Experience
- Cisco - 15 years
- Networks - 15 years
- LAN - 15 years
- Firewalls - 12 years
- IT Security - 11 years
- Visio - 10 years
- CUCM - 4 years
- Software-defined WAN (SDWAN) - 4 years
Availability
Preferred Environment
Visio, Python, Ansible, Cisco, Azure, Palo Alto Networks, FortiGate, VMware ESXi, Linux, Paessler PRTG API
The most amazing...
...initiative I've had was saving 850,000 USD in operating expenses while solving major problems to increase availability from 95% to 99.9% in one year.
Work Experience
Network and Voice Engineer
Public Health Wales NHS Trust
- Researched and evaluated emerging network security threats and solutions to manage them.
- Assisted in designing new systems and upgrading existing ones.
- Provided specialist advice on networking and voice within the Digital IT team of PHW.
IT Network Manager
Sterling Global Oil Resources Ltd, Lagos, Nigeria
- Led the design, documentation, and implementation of the core network upgrade. Implemented active-active high availability (HA) between the spine and leaf switches, resulting in improved uptime of 99.98% within the 1st year.
- Deployed Cisco Unified Communications Manager (CUCM) and Cisco Unity Connection, integrated a 3rd-party GSM gateway, and seamlessly migrated over 1,000 3rd-party phones with no significant downtime.
- Configured and maintained Cambium and Aruba wireless networks. Seamlessly migrated all Cambium access points to the cloud controller and implemented a voucher-based corporate guest wifi solution.
- Initiated the design, configuration, and integration of software-defined wide area network (SD-WAN) solution for site connectivity, resulting in enhanced WAN network performance, reduced WAN costs, and improved security.
- Led troubleshooting and problem resolution efforts for network infrastructure issues, including but not limited to routing and switching, VPN, wireless, and security systems. It resulted in minimal impact on business operations.
IT Network Manager
Flour Mills of Nigeria Plc
- Saved over $850,000 in IT operating expenses by initiating and leading the renegotiation and implementation of internet and multiprotocol label switching (MPLS) and leased-line services.
- Designed, documented, and implemented spine and leaf network architecture. Upgraded the core network from a single Cisco 6508 to dual 9407 core switches configured in active-active HA with redundant uplinks between core and distribution layers.
- Championed the redesign and upgrade of enterprise network edge security infrastructure: designed and implemented 2-tier dual-layered firewall architecture with Cisco, FortiGate, and Palo Alto Networks firewalls.
- Designed and implemented dual multi-homed Border Gateway Protocol (BGP) architecture with dual internet service providers (ISPs) and Cisco 4351 Integrated Services Router (ISR).
- Improved quarterly average availability from 95% to 99.9% on WAN and site links by designing and deploying MPLS and SD-WAN solutions with technologies such as Cisco and Fortinet.
- Led the implementation of CUCM and Cisco Webex and the migration of the company's telephone infrastructure to CUCM.
- Designed, implemented, and managed secure and scalable VPN solutions, including site-to-site and remote access VPNs like Cisco AnyConnect.
- Collaborated with cross-functional teams to manage projects and ensure timely delivery of infrastructure implementations and upgrades, utilizing project management methodologies and tools.
Infrastructure Analyst | Server and Network Management Lead
Ikeja Electric
- Managed the 1st deployment of the advanced metering infrastructure data center in Nigeria.
- Designed, deployed, and maintained complex network and security infrastructure in hybrid data center and cloud environments, implementing active-active core switching and Palo Alto Networks firewalls in HA.
- Implemented dual multi-homed BGP architecture with two ISPs and Huawei AR3260 enterprise routers.
- Configured and administered the network load balancer, F5 BIG-IP appliance, for mission-critical servers and enterprise applications.
- Deployed production and backup storage area network (SAN) storage systems, EMC VNX5600 and VNXe3200.
- Set up and administrated cloud infrastructure in Azure Stack Hub, including virtual machines (VMs), storage accounts, resource groups, load balancers, and Palo Alto Networks VM-Series. Configured and managed Azure's cloud computing environment.
- Designed and implemented IPSec VPNs and secure connectivity solutions for energy e-payment channels and integrators. Implemented a remote access VPN for remote users using Palo Alto's GlobalProtect.
Network Support Officer
Flour Mills of Nigeria Plc
- Led the design and implementation of the relocation of the company's core and edge network infrastructure and data center with minimal downtime.
- Created a detailed and comprehensive network diagram of the entire company's and subsidiaries' enterprise network infrastructure within the first four months of resumption and consistently reviewed and enhanced it.
- Deployed CiscoWorks LAN Management Solution (LMS) for enterprise network management and monitoring.
- Configured and managed network devices across the group, including Cisco switches like the 2960s, 3560s, 3750s, and 6508 core switches, Cisco 3825 ISRs, Cisco ASA 5540 firewalls, Cisco 1113 Secure ACS, Cyberoam CR750ia firewalls, and Cisco IPS 4240.
- Deployed Cisco and RUCKUS controller-based enterprise WiFi network.
- Provisioned and integrated various MPLS VPN links at the company's subsidiaries in several locations in the country.
- Supervised and supported the design and implementation of the Panasonic private branch exchange (PBX) telephony system for the company.
Network Engineer
Sitech Nigeria Limited
- Designed, implemented, and integrated several PTP and PTMP solutions for data communication solutions for CSCS clients' offsite data backup, document conversion, and other services using Cisco, Ceragon, Motorola, and Teletronics products.
- Installed and configured several microwave radios, including Eclipse, for Starcomms and Multilinks networks at various locations.
- Implemented and integrated PTP radio links for the client's headquarter and branch connectivity. Implemented several LAN and WAN network projects.
- Designed and implemented campus-wide wireless and LAN solutions for a large educational campus using Cisco and Teletronics products.
Experience
Review and Upgrade of Internet and Leased-line Services for Flour Mills of Nigeria
As a network manager, I led a team to do a comprehensive review of all ISPs, taking technical and commercial information into account. We invited new ISPs, and after technical and commercial considerations and negotiations supported by the procurement team, we selected one primary ISP and another as a backup. I also redesigned the WAN infrastructure and introduced an SD-WAN solution to replace the existing traditional systems, Cisco L3 switches. Eventually, the project succeeded, saving 850,000 USD on annual operating expenses for the internet and leased-line services. The newly designed and implemented SD-WAN solution achieved 99.98% availability across sites, and the increased bandwidth for business needs led to improved productivity.
Enterprise Network and Firewall Infrastructure Upgrade
As a network manager, I initiated the process and worked with the team to provide detailed network upgrade design documentation, which covered the spine and leaf network layers, as well as the network edge. I led the design and implementation of active-active HA and fully redundant infrastructure from the edge to the core and distribution layers. The project delivery was smooth and successful, with minimal downtime to production.
CUCM Implementation and IP Telephony Migration
CiscoWorks LMS Implementation
Data Center and Network Infrastructure Migration
I made a detailed, comprehensive design of current and future infrastructure. I also designed a migration plan, which involved detailed configuration of all active devices—Cisco 6508 core switches, Cisco 3560, 3750, and 2960 aggregation and distribution switches, Cisco 4400 series wireless LAN controller, Cisco ASA firewalls, Cyberoam firewalls, and other devices. The project was a huge success, with just about 10 minutes of downtime in the production environment, while the migration was seamless and business interruptions minimized. I used PMI's project management methodologies to manage the project both as the technical lead and the project manager.
Advanced Metering Infrastructure Data Center
Education
Bachelor's Degree in Physics
University of Ilorin - Ilorin, Nigeria
Certifications
Palo Alto Networks Certified Network Security Engineer (PCNSE)
Palo Alto Networks
Cisco Certified Network Professional Security
Cisco
Fortinet NSE 4 Network Security Professional
Fortinet
Microsoft Certified: Azure Network Engineer Associate
Microsoft
Certified Information Systems Security Professional
ISC2
Project Management Professional (PMP)
Project Management Institute (PMI)
Cisco Certified Network Professional
Cisco
Cisco Certified Network Associate
Cisco
Microsoft Certified Systems Administrator (MCSA) - Windows Server 2003
Microsoft
Microsoft Certified Technology Specialist: Exchange Server 2007, Configuration
Microsoft
Skills
Libraries/APIs
Paessler PRTG API
Tools
Visio, CUCM, Wireshark, Ansible, Cambium Wireless Gear, Cisco Meraki, VPN, Palo Alto Panorama, Microsoft Exchange, Tcpdump
Languages
Python
Paradigms
Security Software Development, Management, Change Management, Automation
Platforms
Azure, Linux, Windows Server 2003
Industry Expertise
Network Security
Storage
Microsoft Exchange Server, Data Centers
Other
Cisco, LAN, TCP/IP, Firewalls, Networking, Network Administration, Software-defined WAN (SDWAN), IT Security, Architecture, Low Latency, Windows 10, Networks, Palo Alto Networks, FortiGate, VMware ESXi, Physics, Advanced Physics, Computer, WAN, Aruba, Wireless, Virtual Router Redundancy Protocol (VRRP), Multiprotocol Label Switching (MPLS), Ruckus Wireless, Cisco Wireless, Fortinet Firewall Configuration, Border Gateway Protocol (BGP), Open Shortest Path First (OSPF), EIGRP, HSRP, VoIP, IPsec, NAT, Dynamic Host Configuration Protocol (DHCP), DNS, Security Management, Security Engineering, Identity & Access Management (IAM), Security, Cloud Security, Content Security, Endpoint Security, Network Access Control, Security Policies & Procedures, Protection Profiles, Palo Alto Networks WildFire, FortiManager, FortiAnalyzer, Network Infrastructure, Routing, Team Leadership, Stakeholder Management, Stakeholder Engagement, Team Building, Negotiation, Contract Negotiation, Communication Management, Asset Management, Project Scheduling, Scope Management, Scope of Work (SOW), Project Planning, Procurement, Change Leadership, Virtualization, Infrastructure, Network Assurance, IP Connectivity, Cisco IP Services, Servers, Storage, SANs, Load Balancers, IT Networking, Layer 2 Networking, ASA Firewalls, Cisco Routers, Cisco Switches, Network & System Support, Wireless Communication, SD-WAN, IT Project Management, Network Design, CiscoWorks LAN Management Solution, Endpoint Detection and Response (EDR), Network Monitoring, Programming, Voice, Network Engineering, Cisco Unified Communications Manager (CUCM)
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
Share your needs
Choose your talent
Start your risk-free talent trial
Top talent is in high demand.
Start hiring